Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/aab91842-7d76-3325-b89a-5f01e757b2ff.roa
File:                     aab91842-7d76-3325-b89a-5f01e757b2ff.roa (raw, json)
Hash identifier:          P3Qjq7NMxWXFHOYM+8uLWTrj4BXhK1gCHlVSscZO4aA=
Subject key identifier:   48:DD:C4:E5:3A:BC:BA:08:84:79:88:28:8A:AB:B9:59:99:40:6C:47
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285845C5A8F2D4CD76980C9509E9C0
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/aab91842-7d76-3325-b89a-5f01e757b2ff.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     13916
IP address blocks:        66.159.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f2:d4:cd:76:98:0c:95:09:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=c07c3de4-74c6-4a86-b29c-249de54e49ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:56:bd:e5:6d:bb:3b:cc:6b:2b:cc:47:16:
                    90:04:4b:19:8a:e7:d0:82:e1:31:7a:84:16:42:4b:
                    87:07:1b:ef:be:b2:14:c2:50:5c:07:cc:b1:0d:3b:
                    bd:ee:be:dc:d1:0b:4d:87:87:70:9f:91:41:bc:10:
                    c1:72:b4:22:22:00:d4:bf:2e:ce:b3:af:89:8f:de:
                    74:4b:2a:c7:0c:a7:35:1c:a0:48:56:c9:4f:8d:82:
                    b1:d2:15:64:c2:56:73:2e:c5:cb:73:43:f3:30:b5:
                    a9:c8:9f:cc:6e:c4:68:3f:37:88:88:66:1f:0b:7a:
                    92:29:37:05:4b:cc:ad:ef:06:8c:3f:d2:35:e4:d1:
                    b8:e0:f2:63:55:4d:d5:a2:5c:bf:f2:40:0f:05:e7:
                    f5:b5:76:5f:a4:39:4c:08:8d:17:5c:0a:9f:13:0e:
                    41:39:70:8a:66:e2:f2:75:30:48:43:48:10:52:e0:
                    4d:b7:90:ff:7e:66:db:83:7c:e5:00:73:d5:e3:bb:
                    0b:2b:98:22:83:3b:8d:ad:03:0b:9e:72:c2:4a:23:
                    65:fb:a6:00:b2:33:2e:38:6e:43:3a:1c:45:cb:87:
                    60:9c:85:01:a5:ea:71:ec:57:3d:f7:a0:06:2d:37:
                    ee:99:4e:17:3d:84:84:51:1b:24:da:1d:45:cf:ce:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:C4:E5:3A:BC:BA:08:84:79:88:28:8A:AB:B9:59:99:40:6C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/aab91842-7d76-3325-b89a-5f01e757b2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:0e:73:56:37:0f:11:e3:e2:38:7c:0b:2d:f0:bc:51:58:
         42:51:e3:01:57:68:7f:6c:65:9c:4c:9a:1d:59:9b:e7:84:c1:
         c1:a2:2f:f5:64:bb:cf:5a:a1:3b:09:a4:7b:00:bc:32:dc:05:
         be:6c:56:69:fa:c3:e8:d1:31:05:34:b6:99:61:f3:27:a9:da:
         e9:3c:dc:99:ad:65:e9:44:34:e9:af:c6:b6:b2:b2:23:a6:bb:
         c9:f8:8c:ff:9c:af:bd:49:9e:f5:15:d7:ab:cf:44:eb:7e:29:
         66:33:7a:1d:14:7d:13:28:c8:09:b7:36:2b:59:a1:a1:e9:3a:
         43:da:ea:b8:31:5b:37:53:1a:6b:70:da:e4:0d:e6:ed:b7:fa:
         c6:ab:0a:4e:fd:f6:a9:48:ee:35:6a:ff:76:f3:17:90:24:ac:
         14:89:49:99:43:36:16:8f:be:e8:f0:5f:b8:9f:94:d7:0c:04:
         6a:14:e3:4a:6e:92:d0:19:16:05:a6:27:56:c3:6c:db:8c:b2:
         3f:5c:fe:1b:4e:bc:c2:ff:81:c8:55:4a:32:91:b2:8f:31:36:
         38:55:d7:50:54:2f:d4:7a:61:90:2b:f7:af:6e:80:56:73:a0:
         da:6c:40:c6:54:c9:a8:8a:21:fd:bd:a9:83:87:13:fc:f9:66:
         39:43:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:30:12 2024 by rpki-client on console-fra.rpki-client.org